The UMA V2.0 specifications have exited their four-week"WG last call" period, and the Work Group has published an initial a new set of drafts as of 17 27 April 2017 fully reflecting comments made during that period: UMA Core V2.0 revision 21 and OAuth 2.0 Resource Registration revision 08. Here is a detailed swimlane diagram that dynamically tracks the drafts, and a high-level swimlane diagram that briefly summarizes the UMA2 flow. and discussion during the recent review period. If you're familiar with our "traditional" two-spec breakdown, try this new restructuring on for size: Introducing the UMA 2.0 Grant for OAuth 2.0 Authorization, nicknamed Grant (rev 02), and Federated Authorization for UMA 2.0, nicknamed FedAuthz (rev 02).
Expect release notes soon. The UMA Implementer's Guide is also growing. Expect more draft spec work and other information, such as release notes, soon. We are very keen to get your implementation feedback ASAP. The group plans to vote on starting the Public Comment period on May 12. If you're interested to contribute to the review, testing, and finalization of the Kantara Recommendation versions of these specifications over the coming few weeks and months, it's not too late! Fill out the Group Participation Agreement form to get going.
Click the image above to view the UMA Movie, which premiered at the 23rd Internet Identity Workshop in October 2016. (Don't miss the "UMA 101" session at the 24th IIW May 2-4 in Mountain View!)